Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 19:59:17.932 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:58852 10 6452 1 2025-10-22 19:59:26.860 00:00:10.352 TCP 23.104.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-10-22 19:55:46.058 00:05:02.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:00:18.130 00:00:10.395 TCP 1.101.0.1:3000 -> 22.102.0.1:48214 10 6452 1 2025-10-22 20:00:27.255 00:00:10.323 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-10-22 19:55:48.924 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-10-22 20:01:28.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:01:18.558 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58476 10 6452 1 2025-10-22 20:01:28.149 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:01:27.623 00:00:10.325 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:02:18.785 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 10 6452 1 2025-10-22 20:02:27.980 00:00:10.327 TCP 23.104.0.1:41530 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:03:18.961 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:53314 12 6556 1 2025-10-22 20:03:28.348 00:00:10.368 TCP 23.104.0.1:49690 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:04:19.245 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6452 1 2025-10-22 20:04:28.750 00:00:10.331 TCP 23.104.0.1:60978 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:05:19.478 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42942 10 6452 1 2025-10-22 20:05:29.113 00:00:10.890 TCP 23.104.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:01:46.059 00:05:02.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:06:28.199 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:06:19.698 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-10-22 20:06:28.419 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:06:30.051 00:00:10.367 TCP 23.104.0.1:54172 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:02:46.057 00:05:02.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:07:19.916 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43398 10 6452 1 2025-10-22 20:07:30.459 00:00:10.344 TCP 23.104.0.1:54526 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:08:20.127 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-10-22 20:08:30.845 00:00:10.388 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:09:20.337 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6452 1 2025-10-22 20:09:31.271 00:00:10.367 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:10:20.548 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40912 10 6452 1 2025-10-22 20:10:31.688 00:00:10.372 TCP 23.104.0.1:48714 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:11:20.770 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-10-22 20:11:28.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:11:28.410 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:11:32.106 00:00:10.366 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:07:46.063 00:05:02.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:12:20.987 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:32836 10 6452 1 2025-10-22 20:12:32.509 00:00:10.367 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:08:46.060 00:05:02.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:13:21.223 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-10-22 20:13:32.915 00:00:10.370 TCP 23.104.0.1:51620 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:14:21.440 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50118 10 6452 1 2025-10-22 20:14:33.323 00:00:10.370 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:15:21.650 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36266 10 6452 1 2025-10-22 20:15:33.733 00:00:10.376 TCP 23.104.0.1:53544 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:16:28.548 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:16:28.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:16:21.873 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:58050 10 6452 1 2025-10-22 20:16:34.141 00:00:10.361 TCP 23.104.0.1:40942 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:17:22.111 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52702 10 6452 1 2025-10-22 20:17:34.541 00:00:10.361 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:13:46.064 00:05:02.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:18:22.278 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33040 10 6452 1 2025-10-22 20:18:34.943 00:00:10.370 TCP 23.104.0.1:60806 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:14:46.063 00:05:02.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:19:22.485 00:00:22.909 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-10-22 20:19:35.353 00:00:10.365 TCP 23.104.0.1:50608 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:20:35.439 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:60836 10 6452 1 2025-10-22 20:20:35.759 00:00:10.468 TCP 23.104.0.1:34642 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:21:28.585 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:21:28.508 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:21:36.275 00:00:10.364 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:21:35.791 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-10-22 20:22:36.011 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41098 10 6452 1 2025-10-22 20:22:36.679 00:00:10.371 TCP 23.104.0.1:48044 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:23:36.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-10-22 20:23:37.113 00:00:10.366 TCP 23.104.0.1:47864 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:19:46.065 00:05:02.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:24:36.395 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-10-22 20:20:46.063 00:05:02.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:24:37.517 00:00:10.365 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:25:36.636 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50116 10 6452 1 2025-10-22 20:25:37.927 00:00:10.379 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:26:28.390 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:26:28.673 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:26:38.347 00:00:10.367 TCP 23.104.0.1:49708 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:26:36.862 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54664 10 6452 1 2025-10-22 20:27:37.086 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47810 10 6452 1 2025-10-22 20:27:38.761 00:00:10.383 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:28:39.192 00:00:10.366 TCP 23.104.0.1:40782 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:28:37.307 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55058 10 6452 1 2025-10-22 20:25:46.066 00:05:02.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:29:39.603 00:00:10.327 TCP 23.104.0.1:45798 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:29:37.477 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2025-10-22 20:30:39.965 00:00:10.813 TCP 23.104.0.1:41294 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:30:37.679 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60890 10 6452 1 2025-10-22 20:26:46.067 00:05:02.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:31:28.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:31:28.733 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:31:40.815 00:00:10.364 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:31:37.902 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56740 10 6452 1 2025-10-22 20:32:41.217 00:00:10.365 TCP 23.104.0.1:48580 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:32:38.122 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-10-22 20:33:41.623 00:00:10.328 TCP 23.104.0.1:42192 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:33:38.329 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-10-22 20:34:38.543 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51960 10 6452 1 2025-10-22 20:34:41.991 00:00:10.366 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:31:46.068 00:05:02.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:35:38.772 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39656 10 6452 1 2025-10-22 20:35:42.394 00:00:10.369 TCP 23.104.0.1:44742 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:36:29.212 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:36:29.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:36:38.996 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6452 1 2025-10-22 20:32:46.065 00:05:02.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:36:42.799 00:00:10.365 TCP 23.104.0.1:59642 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:37:39.237 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6452 1 2025-10-22 20:37:43.201 00:00:10.328 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:38:39.468 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-10-22 20:38:43.569 00:00:10.325 TCP 23.104.0.1:60670 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:39:39.681 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42666 10 6452 1 2025-10-22 20:39:43.937 00:00:10.380 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:40:39.902 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:37312 10 6452 1 2025-10-22 20:40:44.351 00:00:10.381 TCP 23.104.0.1:40450 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:41:28.911 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:41:28.983 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:37:46.068 00:05:02.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:41:40.573 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41192 10 6452 1 2025-10-22 20:41:44.771 00:00:10.368 TCP 23.104.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:42:40.796 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45600 10 6452 1 2025-10-22 20:38:46.066 00:05:02.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:42:45.185 00:00:10.366 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:43:41.007 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:57912 10 6452 1 2025-10-22 20:43:45.590 00:00:10.480 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:44:41.287 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41192 10 6452 1 2025-10-22 20:44:46.107 00:00:10.369 TCP 23.104.0.1:36572 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:45:41.502 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 10 6452 1 2025-10-22 20:45:46.508 00:00:10.369 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:46:29.080 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:46:29.133 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:46:41.733 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32922 10 6452 1 2025-10-22 20:46:46.913 00:00:10.363 TCP 23.104.0.1:44010 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:43:46.070 00:05:02.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:47:41.946 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 10 6452 1 2025-10-22 20:47:47.317 00:00:10.371 TCP 23.104.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:44:46.068 00:05:02.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:48:42.175 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36602 10 6452 1 2025-10-22 20:48:47.727 00:00:10.378 TCP 23.104.0.1:59102 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:49:42.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-10-22 20:49:48.144 00:00:10.363 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:50:42.604 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58906 10 6452 1 2025-10-22 20:50:48.542 00:00:10.366 TCP 23.104.0.1:50742 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:51:29.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:51:29.779 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:51:42.813 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-10-22 20:51:48.950 00:00:10.362 TCP 23.104.0.1:58538 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:52:43.036 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-10-22 20:52:49.353 00:00:10.363 TCP 23.104.0.1:42552 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:49:46.071 00:05:02.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 20:53:43.242 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58172 10 6452 1 2025-10-22 20:53:49.756 00:00:10.385 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:50:46.069 00:05:02.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 20:54:43.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43522 10 6452 1 2025-10-22 20:54:50.179 00:00:10.321 TCP 23.104.0.1:54064 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:55:43.619 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-10-22 20:55:50.538 00:00:10.324 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:56:29.424 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 20:56:29.373 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 20:56:43.836 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54636 10 6452 1 2025-10-22 20:56:50.901 00:00:10.361 TCP 23.104.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-10-22 20:57:44.084 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:60784 10 6452 1 2025-10-22 20:57:51.301 00:00:11.094 TCP 23.104.0.1:59112 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490545, total packets: 1554, avg bps: 1050, avg pps: 0, avg bpp: 315 Time window: 2025-10-22 19:55:46 - 2025-10-22 20:58:02 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0047s User: 0.0009s Wall: 0.0021s flows/second: 76200.2 Runtime: 0.0021s